$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft File: TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json) Hash identifier: wE+C8lVJOqoO9hhk/rQ6jOidmb4ADQaS4FMPoIa3fpU= Subject key identifier: CD:2F:56:46:47:2F:E8:C7:82:C4:B7:AB:93:6E:0A:B0:D7:35:DD:A9 Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Certificate serial: 06CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft Manifest number: 06B8 Signing time: Thu 24 Apr 2025 21:57:29 +0000 Manifest this update: Thu 24 Apr 2025 21:57:28 +0000 Manifest next update: Thu 01 May 2025 21:57:28 +0000 Files and hashes: 1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: vusDKYYyiYWNDforQY/XVSu9kLHMDHs8nFmKmTsY2p8=) 2: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: gAGSLxf5tFApE12cv2B6l8rBNTtC/4BB/4TsOzWKxtk=) 3: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: yIVzk4uXvD0YPL4yuXzlhtAAemUdmmIw9l3qjodWsVI=) 4: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: Fb/SlWPpuirXxScQ8K2j3QvFK2QuAZBQm5YwL5xNiGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1743 (0x6cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Validity Not Before: Apr 24 21:57:28 2025 GMT Not After : May 1 21:57:28 2025 GMT Subject: CN=680ab3c8-4a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b8:6e:d8:e9:2c:f8:13:d9:c3:6d:09:7e:0f: 76:82:fd:c4:40:38:e4:4b:a3:e4:89:0b:99:74:57: 15:86:be:9b:1d:4b:13:bd:b3:10:72:75:3a:cc:ac: f5:e5:37:a1:d7:e8:e0:75:e9:a0:cf:c7:01:bc:23: d1:b1:24:4c:d7:e3:96:96:1e:ef:bd:fa:bc:b3:b3: 12:cc:d9:24:57:45:3f:8f:6c:a3:47:6b:81:f3:de: 3c:37:46:f8:b6:6e:ae:02:cb:b7:69:b8:6b:d6:7b: 9c:b4:53:d9:56:bd:fa:51:da:e8:7b:3b:bd:fe:a8: 97:94:0e:a0:af:ea:5e:4e:cd:93:d5:6e:57:fb:ac: 38:c5:02:08:bd:44:04:6a:ae:e5:a5:8c:7e:b5:4a: 2c:d0:7b:b6:d6:df:40:b6:80:78:3d:28:b3:a2:95: 08:61:6e:1a:e3:39:47:7a:81:ca:a5:87:dc:8d:97: 57:aa:03:a3:dd:0f:93:91:17:eb:ff:87:cb:4e:7b: 37:36:c2:35:74:f2:1d:33:09:52:40:60:1b:cb:88: 01:95:e7:d2:0b:37:9e:01:e5:2d:77:9b:3c:b3:b1: 2a:b8:3f:bf:ab:ec:f2:44:7a:98:68:e5:6a:1d:bd: 8c:ba:81:61:22:e8:be:48:71:b2:f2:5a:61:ac:8a: 36:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2F:56:46:47:2F:E8:C7:82:C4:B7:AB:93:6E:0A:B0:D7:35:DD:A9 X509v3 Authority Key Identifier: keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:70:0d:42:27:54:00:e0:e9:73:cd:91:67:35:fe:3a:7e:d5: 1c:ab:f6:7f:83:3e:12:c8:d5:ab:f7:10:03:9a:44:a0:b2:0d: f0:70:79:a8:7b:d0:38:d2:c5:e1:bb:36:e0:5a:9d:1c:90:51: af:35:ef:ca:0f:7c:56:ae:4c:a6:6f:c9:eb:e7:fb:2c:55:29: 72:c3:d6:6f:a0:2b:f8:ef:22:b1:8e:47:cd:fb:3e:53:27:4d: ec:f9:39:6c:fb:c5:ba:ae:e9:71:de:cc:20:a2:7d:03:cb:97: 1f:8c:88:9a:94:1d:ca:fc:a6:95:e7:5e:2c:58:0d:bb:99:12: 84:85:34:56:b7:53:4c:9f:e4:e2:55:e6:9e:31:f7:e5:78:ae: 8c:9b:48:05:8b:c7:3f:69:57:21:d6:da:34:a2:84:cb:4d:66: ff:52:ed:cb:84:1b:2f:69:33:15:fe:16:e4:d4:17:97:1c:9a: 5a:f0:15:7e:3c:3c:2b:1a:48:6c:99:03:2a:5b:05:0b:8f:cd: dd:eb:07:6e:df:ea:af:7b:8c:85:d3:2b:08:7c:8b:85:b6:be: 8e:94:ed:21:e7:36:90:2d:48:3f:d4:5d:94:88:67:76:74:09: 15:d0:ce:3e:a5:be:99:76:aa:b7:1e:a5:d5:43:a6:89:64:bf: 5a:43:11:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBMUIxMTAvBgNVBAUTKDRDMzQ5QzUxQ0E1OTg5MDdENUMwN0NCMUYyNDg1MUZD MDQ4REFEMUEwHhcNMjUwNDI0MjE1NzI4WhcNMjUwNTAxMjE1NzI4WjAYMRYwFAYD VQQDEw02ODBhYjNjOC00YTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Lhu2Oks+BPZw20Jfg92gv3EQDjkS6PkiQuZdFcVhr6bHUsTvbMQcnU6zKz1 5Teh1+jgdemgz8cBvCPRsSRM1+OWlh7vvfq8s7MSzNkkV0U/j2yjR2uB8948N0b4 tm6uAsu3abhr1nuctFPZVr36Udroezu9/qiXlA6gr+peTs2T1W5X+6w4xQIIvUQE aq7lpYx+tUos0Hu21t9AtoB4PSizopUIYW4a4zlHeoHKpYfcjZdXqgOj3Q+TkRfr /4fLTns3NsI1dPIdMwlSQGAby4gBlefSCzeeAeUtd5s8s7EquD+/q+zyRHqYaOVq Hb2MuoFhIui+SHGy8lphrIo2RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0vVkZH L+jHgsS3q5NuCrDXNd2pMB8GA1UdIwQYMBaAFEw0nFHKWYkH1cB8sfJIUfwEja0a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUExQi9EQzU4Q0M1QTVD NDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlRZlZ3SHl4OGtoUl9BU05y Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REU2NVY3BaaVFmVndIeXg4a2hSX0FTTnJSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUExQi9EQzU4Q0M1QTVDNDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlR ZlZ3SHl4OGtoUl9BU05yUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDcA1CJ1QA4OlzzZFnNf46ftUcq/Z/gz4SyNWr9xADmkSgsg3wcHmo e9A40sXhuzbgWp0ckFGvNe/KD3xWrkymb8nr5/ssVSlyw9ZvoCv47yKxjkfN+z5T J03s+Tls+8W6rulx3swgon0Dy5cfjIialB3K/KaV514sWA27mRKEhTRWt1NMn+Ti VeaeMffleK6Mm0gFi8c/aVch1to0ooTLTWb/Uu3LhBsvaTMV/hbk1BeXHJpa8BV+ PDwrGkhsmQMqWwULj83d6wdu3+qve4yF0ysIfIuFtr6OlO0h5zaQLUg/1F2UiGd2 dAkV0M4+pb6Zdqq3HqXVQ6aJZL9aQxEc -----END CERTIFICATE-----Generated at Sat Apr 26 05:24:46 2025 by rpki-client